Marcel Holtmann <marcel@xxxxxxxxxxxx> wrote: > why use the description instead the actual key id? I wonder if a single > socket option and a struct providing the key type and key id might be more > useful. If the key becomes invalid in some way, you can call request_key() again if you have the description to get a new key. This is how afs and af_rxrpc do things on the client side. David